The Privacy Rule includes these administrative requirements:
- Every covered entity must designate a Privacy Official / Officer. You should know who your Privacy Official is and how to contact them.
- All staff must participate in HIPAA training.
- Safeguards must be in place to protect PHI.
- A complaints process must be in place to handle patient complaints about PHI handling.
- A discipline procedure must be in place to penalize employees who do not comply with privacy policies.
